Return-Path: X-Original-To: apmail-cloudstack-issues-archive@www.apache.org Delivered-To: apmail-cloudstack-issues-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id B25B917BC7 for ; Thu, 19 Nov 2015 17:24:11 +0000 (UTC) Received: (qmail 41054 invoked by uid 500); 19 Nov 2015 17:24:11 -0000 Delivered-To: apmail-cloudstack-issues-archive@cloudstack.apache.org Received: (qmail 40991 invoked by uid 500); 19 Nov 2015 17:24:11 -0000 Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list issues@cloudstack.apache.org Received: (qmail 40942 invoked by uid 500); 19 Nov 2015 17:24:11 -0000 Delivered-To: apmail-incubator-cloudstack-issues@incubator.apache.org Received: (qmail 40936 invoked by uid 99); 19 Nov 2015 17:24:11 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 19 Nov 2015 17:24:11 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id 08AB02C1F51 for ; Thu, 19 Nov 2015 17:24:11 +0000 (UTC) Date: Thu, 19 Nov 2015 17:24:11 +0000 (UTC) From: "Nicolas Vazquez (JIRA)" To: cloudstack-issues@incubator.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (CLOUDSTACK-9074) Support shared networking in NiciraNVP Plugin MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/CLOUDSTACK-9074?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Nicolas Vazquez updated CLOUDSTACK-9074: ---------------------------------------- Description: h3. Introduction Currently NiciraNVP plugin supports only Isolated networking. In this mode of operations networks are assigned to individual Cloudstack accounts and on NSX side are completely isolated on the L3 level. Many use cases especially in corporate environment call for shared networking mode support. In some circumstances there also may be a need to translate shared NSX network over to a physical VLAN via L2 NSX gateway. Features that will be introduced to support Cloudstack shared networks in two modes of NiciraNVP plugin: * Shared networks mapped to a physical VLAN with L2 NSX gateway * Shared networks within the same L3 NSX domain. Multiple L3 NSX domains will be supported. h3. Features h4. Shared networking model support # Support native Cloudstack shared network in NiciraNVP plugin. # Current code that implements isolated networking mode support will stay intact. # Designate network service offering by configuring VirtualNetworking provider with NiciraNVP. # Static/Source NAT is not used and ignored if defined in the network offering. # Nicira_vvp_router_map table will support non-unique logical routers to implement L3 NSX routing domains where multiple Cloudstack networks are attached to the same logical router. # Shared network with NSX based Virtual networking will go through the following states: ## Allocated ## Implementing ## Implemented ## Destroy h4. Support NSX L2 gateways for L2 based VLANs mapped to a physical network # Optional L2gatewayserviceuuid parameter for NiciraNVP controller # VLAN ID of a Shared network represents VLAN to pass through L2 gateway similar to native Cloudstack shared networking # NSX workflow for network allocation ## Check if l2gatewayservice defined ## Create record in networks table ### NiciraNvpGuestNetworkGuru as Guru_name ### Lswitch as broadcast_doamin ### Vlan://vlan_id as broadcast_uri ## Create record in VLAN table # NSX workflow for network implementation ## Check if l2gatewayservice defined and valid ## Create logical switch ## Map logical switch to L2gateway service assigning shared network VLAN ID # NSX workflow for NIC management and/or hypervisor support ## No changes from current implementation h4. Support NSX L3 multiple routing domains # VLAN ID of a Shared network represents an UUID of a NSX virtual router of a particular routing domain. We will support UUID style notation for VLAN ID. l3gatewayservice option is not used in shared networking # It is assumed that if connectivity to the physical networking is required then logical router is configured and connected to the physical network in advance. NiciraNVP plugin will not perform any task beyond basic connectivity to the logical router # Support NSX L3 multiple routing domains # NSX workflow for network allocation ## Create record in networks table ### NiciraNvpGuestNetworkGuru as Guru_name ### Lswitch as broadcast_domain ### NULL as broadcast_uri ## Create record in VLAN table ## Create record in nicira_nvp_router_map table # NSX workflow for network implementation ## Check if logical router exists on NSX side which UUID matches the one defined during shared network creation. This mode is activated if VLAN ID supplied in UUID style notation ## Create logical switch ## Attach logical switch to the logical router ## Assign shared network default gateway to the inside port of the logical router # NSX workflow for NIC management and/or hypervisor support ## No changes from current implementation was: h3. Introduction Currently NiciraNVP plugin supports only Isolated networking. In this mode of operations networks are assigned to individual Cloudstack accounts and on NSX side are completely isolated on the L3 level. Many use cases especially in corporate environment call for shared networking mode support. In some circumstances there also may be a need to translate shared NSX network over to a physical VLAN via L2 NSX gateway. Features that will be introduced to support Cloudstack shared networks in two modes of NiciraNVP plugin: * Shared networks mapped to a physical VLAN with L2 NSX gateway * Shared networks within the same L3 NSX domain. Multiple L3 NSX domains will be supported. h3. Features # *Shared networking model support* ## Support native Cloudstack shared network in NiciraNVP plugin. ## Current code that implements isolated networking mode support will stay intact. ## Designate network service offering by configuring VirtualNetworking provider with NiciraNVP. ## Static/Source NAT is not used and ignored if defined in the network offering. ## Nicira_vvp_router_map table will support non-unique logical routers to implement L3 NSX routing domains where multiple Cloudstack networks are attached to the same logical router. ## Shared network with NSX based Virtual networking will go through the following states: ### Allocated ### Implementing ### Implemented ### Destroy # *Support NSX L2 gateways for L2 based VLANs mapped to a physical network* ## Optional L2gatewayserviceuuid parameter for NiciraNVP controller ## VLAN ID of a Shared network represents VLAN to pass through L2 gateway similar to native Cloudstack shared networking ## NSX workflow for network allocation ### Check if l2gatewayservice defined ### Create record in networks table #### NiciraNvpGuestNetworkGuru as Guru_name #### Lswitch as broadcast_doamin #### Vlan://vlan_id as broadcast_uri ### Create record in VLAN table ## NSX workflow for network implementation ### Check if l2gatewayservice defined and valid ### Create logical switch ### Map logical switch to L2gateway service assigning shared network VLAN ID ## NSX workflow for NIC management and/or hypervisor support ### No changes from current implementation \\ # *Support NSX L3 multiple routing domains* ## VLAN ID of a Shared network represents an UUID of a NSX virtual router of a particular routing domain. We will support UUID style notation for VLAN ID. l3gatewayservice option is not used in shared networking ## It is assumed that if connectivity to the physical networking is required then logical router is configured and connected to the physical network in advance. NiciraNVP plugin will not perform any task beyond basic connectivity to the logical router ## Support NSX L3 multiple routing domains ## NSX workflow for network allocation ### Create record in networks table #### NiciraNvpGuestNetworkGuru as Guru_name #### Lswitch as broadcast_domain #### NULL as broadcast_uri ### Create record in VLAN table ### Create record in nicira_nvp_router_map table ## NSX workflow for network implementation ### Check if logical router exists on NSX side which UUID matches the one defined during shared network creation. This mode is activated if VLAN ID supplied in UUID style notation ### Create logical switch ### Attach logical switch to the logical router ### Assign shared network default gateway to the inside port of the logical router ## NSX workflow for NIC management and/or hypervisor support ### No changes from current implementation > Support shared networking in NiciraNVP Plugin > --------------------------------------------- > > Key: CLOUDSTACK-9074 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-9074 > Project: CloudStack > Issue Type: Improvement > Security Level: Public(Anyone can view this level - this is the default.) > Affects Versions: 4.7.0 > Reporter: Nicolas Vazquez > Fix For: 4.7.0 > > > h3. Introduction > Currently NiciraNVP plugin supports only Isolated networking. In this mode of operations networks are assigned to individual Cloudstack accounts and on NSX side are completely isolated on the L3 level. Many use cases especially in corporate environment call for shared networking mode support. In some circumstances there also may be a need to translate shared NSX network over to a physical VLAN via L2 NSX gateway. > Features that will be introduced to support Cloudstack shared networks in two modes of NiciraNVP plugin: > * Shared networks mapped to a physical VLAN with L2 NSX gateway > * Shared networks within the same L3 NSX domain. Multiple L3 NSX domains will be supported. > h3. Features > h4. Shared networking model support > # Support native Cloudstack shared network in NiciraNVP plugin. > # Current code that implements isolated networking mode support will stay intact. > # Designate network service offering by configuring VirtualNetworking provider with NiciraNVP. > # Static/Source NAT is not used and ignored if defined in the network offering. > # Nicira_vvp_router_map table will support non-unique logical routers to implement L3 NSX routing domains where multiple Cloudstack networks are attached to the same logical router. > # Shared network with NSX based Virtual networking will go through the following states: > ## Allocated > ## Implementing > ## Implemented > ## Destroy > h4. Support NSX L2 gateways for L2 based VLANs mapped to a physical network > # Optional L2gatewayserviceuuid parameter for NiciraNVP controller > # VLAN ID of a Shared network represents VLAN to pass through L2 gateway similar to native Cloudstack shared networking > # NSX workflow for network allocation > ## Check if l2gatewayservice defined > ## Create record in networks table > ### NiciraNvpGuestNetworkGuru as Guru_name > ### Lswitch as broadcast_doamin > ### Vlan://vlan_id as broadcast_uri > ## Create record in VLAN table > # NSX workflow for network implementation > ## Check if l2gatewayservice defined and valid > ## Create logical switch > ## Map logical switch to L2gateway service assigning shared network VLAN ID > # NSX workflow for NIC management and/or hypervisor support > ## No changes from current implementation > h4. Support NSX L3 multiple routing domains > # VLAN ID of a Shared network represents an UUID of a NSX virtual router of a particular routing domain. We will support UUID style notation for VLAN ID. l3gatewayservice option is not used in shared networking > # It is assumed that if connectivity to the physical networking is required then logical router is configured and connected to the physical network in advance. NiciraNVP plugin will not perform any task beyond basic connectivity to the logical router > # Support NSX L3 multiple routing domains > # NSX workflow for network allocation > ## Create record in networks table > ### NiciraNvpGuestNetworkGuru as Guru_name > ### Lswitch as broadcast_domain > ### NULL as broadcast_uri > ## Create record in VLAN table > ## Create record in nicira_nvp_router_map table > # NSX workflow for network implementation > ## Check if logical router exists on NSX side which UUID matches the one defined during shared network creation. This mode is activated if VLAN ID supplied in UUID style notation > ## Create logical switch > ## Attach logical switch to the logical router > ## Assign shared network default gateway to the inside port of the logical router > # NSX workflow for NIC management and/or hypervisor support > ## No changes from current implementation -- This message was sent by Atlassian JIRA (v6.3.4#6332)